Board Report: 2020-IT-B-009R March 25, 2020
We tested the data loss protection solution used by the Board. We completed this testing as part of our 2019 audit of the Board's information security program.
Our testing identified opportunities to strengthen DLP processes to provide greater assurance that sensitive Board data are protected. We also found that the DLP solution does not operate consistently across all parts of the Board's network. The Federal Reserve System is in the process of implementing a new DLP solution.
Given the sensitivity of our review, this memorandum is restricted.
